How to use a Machine Cert with a Private Key for Global protect prelogon

Greetings,

We utilize our own PKI infrastructure so the certificates we want to use for prelogon are already in place. I am also new to this so it may be working as designed but having a hard time validating.

We have imported a rootCA into Strata

Conditional rules for GP MFA auth?

Is it possible to apply conditional rules on a GlobalProtect login so the means of login can vary? For example; If a Windows client is operating within a particular country or public IP range, just require simple SAML user login and maybe AD machine

Multiple versions needed to access different portals

We are a service company that needs to access various customer sites. Several of our customers use Palo Alto Global Protect, but not all of them are up to date, and we have to use several different versions of the Global Protect "client" software (no

VPN Attempts from Rotating IPs and Generic Usernames

Hello all,

For several weeks, I have been getting many VPN login attempts from different IPs trying to login using generic usernames, like "guest", "support", "admin", etc.

Is this normal? Is there anything that I can do to stop this from happeni

Latency while using client application such as MS RSAT with GP VPN

Hello All,

Does any one face latency issues while using client application such as MS RSAT or MS SCCM using GP. I'm currently running GP version 6.1.2-83

I will appreciate any help/comments to find a solution to this chronic ongoing issue

Multiple bogus credentials on GP portal

I have noticed there are alot of random IPs that are trying to login to my GP portal. We are using pre-login method of GP so legit users do not login. GP starts and does an auto-login pre-windows login. The logs tell me these failures are coming from

Global Protect for IPad auto-connect option partially works

We have around 200 Ipads deployed to our field agents.   Our configuration on our global protect portal is to have always-on enabled, so that when a device loses connection, that when connection is restored the vpn would automatically reconnect.   

m

GP Update to 6.1 and PAN-OS 10.2.7-h3

Hello,

We are planning to upgrade our GP client to 6.1.4. Currently we are running 6.0.7 and the PAN-OS (10.2.7-h3). Since we just recently upgraded our PAN-OS, we do not intend to upgrade to 11.0 anytime soon. My question is; what would be the behavi

Stop authentication happening twice for GP client

Hi All,

we are getting duo/twice authentication for our GP clients is that possible to avoid with out enable option " Generate cookie for authenticaiton override"  

GlobalProtect Static IP .....?

Hello,

I want to ask is possible to give GlobalProtect client static IP or no ?

Thank you

VPN SSO with MFA every time

Hi

We have recently purchased a Palo Alto firewall and connect to the VPN using GlobalProtect. 

For Teams/Sharepoint etc. We use Azure MFA where a push notification comes through to the authenticator app and to get this working on GlobalProtect w

Clientless VPN portal and SAML SSO and Application SSO

Hi there, I wanted to check that possibly what I'm trying isn't actually going to work. Had a look around at people with simular issues on LDAP, but I thought using SAML would solve this ... but not!

What I'm trying to achieve here is SSO into the

Global Protect users are unable to access SQL database which hosted in Azure

We have a tunnel configured between on-premises PA-5250 and Azure. traffic flows as expected users who are not connected to the global protect can connect to the SQLMS without any issues.

However, users who are connected to the GP can't access the

GlobalProtect ver6.1.4 on IPhone IOS 15

Hi, 

I am trying to use GloblaProtect 6.1.4 on IPhone IOS 15, I am able to open the portal successfully but when I try to connect using the gateway I get an error says "Gateway external_gateway: could not connect to gateway, the device or feature req